Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Facebook Asking for Some New Users' Email Passwords

thedailybeast.com

Post reply on HN
Print view View original

61–70 of 377 posts

Re: Facebook Asking for Some New Users' Email Passwords

#61

Post by thinkling »

aphextron wrote: post #28
tomc1985 wrote: post #19

Earlier quoted context omitted.

Amateur photographer here, Instagram is invaluable. Post only what you want the world to see, and so on...

Are you an amateur photographer? Or are you someone who posts images to a social media website for a dopamine hit? Perhaps there’s a value to gatekeeping. It can make us actually put effort and consideration into things. Modern web services like Instagram have allowed human fantasies to run wild, completely detached from reality. If you truly cared about your art and wanted it to be seen, you would devote yourself to…

Instagram is used very commonly in the art world and all of the full-time artists I know are on it and use it to promote their work, photography or otherwise.

Different people use platforms in different ways.

Re: Facebook Asking for Some New Users' Email Passwords

#62

Post by nullc »

kevin_thibedeau wrote: post #5

I had someone create a Facebook account with my email once. I let it persist for a year until I got tired of the friend request notices. Did a password reset and deleted the account.

How did you get through the time limited "name the tagged friends" authentication?

Re: Facebook Asking for Some New Users' Email Passwords

#63

Post by lostlogin »

jammygit wrote: post #56
dragonsngoblins wrote: post #26

Earlier quoted context omitted.

And so what if they are going to stop? Why were they offering it in the first place? It is such an obviously terrible idea

'move fast and break things' ?

What’s the phase after you’ve moved fast and broken the things?

Re: Facebook Asking for Some New Users' Email Passwords

#64

Post by anoncake »

VoiceOfWisdom wrote: post #39
nemothekid wrote: post #22

Earlier quoted context omitted.

Mint legitmatized that authorization flow years before Plaid came around and the banks decided that was the best way to move forward instead of adopting something like an oauth2 flow.

I remember Quicken doing it back in the early 2000s.

That is a program though, not a website.

Re: Facebook Asking for Some New Users' Email Passwords

#65

Post by tapland »

hn_throwaway_99 wrote: post #18

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

Swedish payment processor Klarna does something similar to this as well. If bying something through the platform by direct bank transfer you are asked to sign to your bank to accept the payment using BankID [0], which is normal.

What is not normal is that they grab your personal identification number and send a login request using BankID before you open your app. When authenticating the login you authorize one of Klarnas third parties to log into your bank account as you, allowing them to pull records of all your financial transactions, account statements etc. Most users just authenticate the login without reading where the request is coming from on the login prompt.

I don't understand how that can be legal, but they are relying on recent court cases where scammers would call old people asking them to log on to check their retirement accounts. The scammers would then send a login request before the user sent theirs, log on to the accounts and change what funds received the victims pension payments. The scammers were ruled in the wrong, but the logins themselves were ruled to be an ok way of doing business.

[0] https://en.wikipedia.org/wiki/Electronic_identification#Swed...

Re: Facebook Asking for Some New Users' Email Passwords

#66

Post by 55555 »

hn_throwaway_99 wrote: post #18

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

wait, Plaid mines my transaction history? I assumed they made all their money from API customers paying fees. Is this true?

Re: Facebook Asking for Some New Users' Email Passwords

#67

Post by kyle-rb »

I just don't understand how this gets implemented without someone speaking up and saying "hey, wait, isn't this an insane thing to do?".

I would guess it's some combination of the complainers being ignored, and people at a higher level thinking "well we're doing this in a secure way, as long as the user trusts us, and why wouldn't they trust us, we're Facebook!".

Re: Facebook Asking for Some New Users' Email Passwords

#68

Post by jks »

tapland wrote: post #65
hn_throwaway_99 wrote: post #18

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

Swedish payment processor Klarna does something similar to this as well. If bying something through the platform by direct bank transfer you are asked to sign to your bank to accept the payment using BankID [0], which is normal. What is not normal is that they grab your personal identification number and send a login request using BankID before you open your app. When authenticating the login you authorize one of Kla…

Klarna tried to ask for people's bank access codes in Finland until Finland's Financial Supervisory Authority ruled it illegal. Seems like a shady business to me.

Re: Facebook Asking for Some New Users' Email Passwords

#69

Post by Scorpiion »

tapland wrote: post #65
hn_throwaway_99 wrote: post #18

All of these types of "hey, give us your password to this other system" are just training users to get phished. IMO the worst offender in this is Plaid, which has created a service where millions of people are giving their banking credentials so some random startup can mine your transaction data. And people think FB has privacy implications...

Swedish payment processor Klarna does something similar to this as well. If bying something through the platform by direct bank transfer you are asked to sign to your bank to accept the payment using BankID [0], which is normal. What is not normal is that they grab your personal identification number and send a login request using BankID before you open your app. When authenticating the login you authorize one of Kla…

I tried to find more information about this statement:

"When authenticating the login you authorize one of Klarnas third parties to log into your bank account as you, allowing them to pull records of all your financial transactions, account statements etc.“

Do you have any source to verify this claim? That they can and do pull down this information. I would like to know if they really have all that information or not, if so it's a surprise to me, did not know that.

Post reply on HN